IN THE CLAIMS 

1 . (original) A method for processing network management data received by a 
network management system during the monitoring of a network, the method comprising: 
receiving network management data, and determining if the network management data indicates 
the resolution of a previous event generated by the network management system in response to 
5 previously received network management data. 



2. (original) A method as claimed in claim 1, wherein, if the network 
management data indicates the resolution of a previous event, the method further comprises 
marking the previous event as resolved. 



3. (original) A method as claimed in claim 1, wherein the network management 
data is processed in response to the network management system receiving network management 
data from the network. 



4. (original) A method as claimed in claim 1, the network management data 
comprising values of a monitored characteristic of a part of the network for which an event is 
generated if the monitored value exceeds a predetermined threshold, wherein an event list 
includes an unresolved previous event for the monitored characteristic, wherein the step of 
5 receiving network management data comprises receiving a value for the monitored characteristic, 
and the step of determining comprises considering whether the monitored value has been below 
the predetermined threshold for a preceding time period, and if so determining that the received 
value indicates the resolution of the unresolved previous event. 
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5. (original) A method as claimed in claim 4, wherein the step of considering 
comprises, in response to receiving the network management data, comparing a first received 
value for the monitored characteristic with the predefined threshold, and if the value is below the 
predefined threshold, starting a timer, the timer expiring at the end a predefined time period. 

6. (original) A method as claimed in claim 5, wherein the step of considering 
further comprises comparing each subsequent received value for the monitored characteristic 
with the predefined threshold, and if any value exceeds the threshold canceling the timer. 



7. (original) A method as claimed in claim 5, wherein, when the timer expires, 
determining that the monitored value has been below the predetermined threshold for the 
preceding time period. 



8. (original) A method for processing data representing a monitored 
characteristic of a part of the network in a network management system, the method comprising: 
periodically receiving a value for the monitored characteristic; if a received value exceeds a 
predetermined threshold for the monitored characteristic generating an event; and thereafter, 
5 periodically considering whether the monitored value has been below the predetermined 
threshold for a preceding time period, and if so determining that the event is resolved. 



9 (original) A method as claimed in claim 8, wherein the preceding time period 
is an immediately preceding predetermined time period, and the step of periodically considering 
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comprises considering whether the monitored value has been below the predetermined threshold 
for the immediately preceding time period in response to each subsequently received value. 

10. (original) A method as claimed in claim 8, wherein if the step of considering 
determines that the event is resolved, the method further comprises marking the event as 
resolved. 

11. (original) A method as claimed in claim 1, the network management data 
relating to an asynchronous Trap being received by the network management system, wherein 
the step of determining comprises considering if the Trap indicates the possible resolution of an 
event in an event log. 

1 2. (original) A method as claimed in claim 1 1 , wherein if the Trap indicates the 
possible resolution of an event in an event log, the step of determining further comprises 
considering whether the event log includes a previously received event that is resolved by the 
Trap. 

5 

13. (original) A method for processing data received in an asynchronous Trap by 
a network management system, the method comprising: receiving a Trap from the network; 
considering if the Trap indicates the possible resolution of a event in an event log, and if so 
considering whether the event log includes a previously received event that is resolved by the 

5 Trap. 
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14. (original) A method as claimed in claim 1, wherein the method processes 
network management data previously received by the network management system and stored in 
memory. 



15. (original) A method as claimed in claim 14, wherein the step of receiving 
network management data comprises receiving event data relating to an event stored in memory, 
in response to a scan of previously generated events stored and included in an event log. 

16. (original) A method as claimed in claim 15, wherein the event data relates to 
a recurring event and includes the time of the last occurrence of the event. 



17. (original) A method as claimed in claim 16, wherein the step of determining 
comprises comparing the present time with the time of the last occurrence of the event, and, if 
the time difference is greater than a predetermined time interval, determining that the event is 
resolved. 

18. (original) A method as claimed in claim 17, wherein if the step of 
determining determines that the event is resolved, the method further comprises marking the 
recurring event as resolved. 



19. (original) A method for processing event data generated by a network 
management system during the monitoring of a network, the method processing event data 
relating to events previously generated by the network management system a plurality of times 
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and which may be entered in the event log as a recurring event, the method comprising 
5 identifying an event to be processed from the event list; and considering whether the condition 
which caused the event to be generated has occurred in a preceding time period. 



20. (original) A method as claimed in claim 19, wherein, if the step of 
considering determines that the condition which caused the event to be generated has not 
occurred in the preceding time period, determining the event to be resolved. 



2 1 . (original) A method as claimed in claim 20, further comprising marking the 
event in the event list as resolved. 



22. (original) A computer readable medium including a computer program for 
processing network management data received by a network management system during the 
monitoring of a network; the program comprising a program step for receiving network 
management data and for determining if the network management data indicates the resolution of 
5 a previous event generated by the network management system in response to previously 
received network management data. 



23. (original) A network management system for processing network 
management data received during the monitoring of a network, the system comprising: a 
processor for receiving network management data and determining if the network management 
data indicates the resolution of a previous event generated by the network management system in 
5 response to previously received network management data. 



MCDONNELL BOEHNEN 

HULBERT & BERGHOFF LLP 

300 SOUTH WACKER DRIVE, 32ND FLOOR 

CHICAGO, IL 60606 

(312)913-0001 



24. (original) A network management system as claimed in claim 23, further 
comprising memory for storing data relating to events generated by the system, wherein if the 
processor determines that received network management data indicates the resolution of a 
previous event stored in the memory, the processor updates the memory to mark the previous 

5 event as resolved. 

25. (original) A network management system as claimed in claim 24, further 
comprising means for presenting an event list of generated events to a user. 
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